Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add automatic releases using goreleaser #234

Merged
merged 25 commits into from
Mar 30, 2022
Merged

Add automatic releases using goreleaser #234

merged 25 commits into from
Mar 30, 2022
+260 −46

Commits on Mar 21, 2022

  1. chore: add goreleaser + cosign releases

    @shibumi @rdimitrov
    shibumi authored and rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    bf56512 View commit details
    Browse the repository at this point in the history

  2. feat: keyless realeases with goreleaser and cosign 

    This commit enables keyless signatures via the Github Actions workload identity. The pipeline will run on a new tag and will generate a compiled cli and server version of TUF and a signed source tarball. The keys are ephemeral and valid for 30min and strictly coupled to the workload identity of the Github Actions workflow. Transparency logs will be automatically uploaded to the public rekor instance
    @shibumi @rdimitrov
    shibumi authored and rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    fc533d7 View commit details
    Browse the repository at this point in the history

  3. chore: try a basic config of gorelease

    @trishankatdatadog @rdimitrov
    trishankatdatadog authored and rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    0f71eed View commit details
    Browse the repository at this point in the history

  4. chore: split test and release phases into reusable workflows 

    Adds also github style changelog in which it tags people who
contributed to the last release. It also groups breaking commits
into a separate group that is on top of the changelog for better
visibility.

Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    4859d45 View commit details
    Browse the repository at this point in the history

  5. chore: bump goreleaser to v1.6.3 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    1fc8339 View commit details
    Browse the repository at this point in the history

  6. chore: use golangci-lint instead of go fmt, staticcheck, etc. 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    17a77f9 View commit details
    Browse the repository at this point in the history

  7. chore: use github-action for goveralls instead of the legacy GOPATH way 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    4260b24 View commit details
    Browse the repository at this point in the history

  8. chore: add golangci.yml config enabling several other linters 

    Fix also some of the linter errors so it doesn't fail.

Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    5e1875c View commit details
    Browse the repository at this point in the history

  9. chore: use the flags property of goreleaser instead of env vars while… 

    … building

Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    0149cae View commit details
    Browse the repository at this point in the history

  10. chore: set goreleaser to automatically mark releases with a suffix as… 

    … prereleases

Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    20374ae View commit details
    Browse the repository at this point in the history

  11. chore: partially revert "Add golangci.yml config enabling several oth… 

    …er linters"

This reverts commit a72cf40 which
also included fixes for some of the issues raised by golangci-lint.
They will be addressed in a separate PR.

Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    e9f42ac View commit details
    Browse the repository at this point in the history

  12. chore: add commitsar action to enforce the use of conventional commits 

    For reference - https://www.conventionalcommits.org

Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    c9a23fd View commit details
    Browse the repository at this point in the history

  13. fix: use keyword specificed in the conventional commit spec for break… 

    …ing changes

Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 21, 2022
    Configuration menu
    Copy the full SHA
    c2e1f53 View commit details
    Browse the repository at this point in the history

Commits on Mar 24, 2022

  1. chore: configure dependabot to monitor github-actions too 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    8ea6b29 View commit details
    Browse the repository at this point in the history

  2. chore: pin github-actions dependencies by digest 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    790cfc6 View commit details
    Browse the repository at this point in the history

  3. chore: pin and configure dependabot to monitor Python test dependencies 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    27d6d6c View commit details
    Browse the repository at this point in the history

  4. chore: bump goreleaser version to v1.7.0 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    c32d676 View commit details
    Browse the repository at this point in the history

  5. chore: run tests using Go version 1.18.x 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    53cd095 View commit details
    Browse the repository at this point in the history

  6. chore: checkout code first in order to fix CI failure 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    6f4be57 View commit details
    Browse the repository at this point in the history

  7. chore: run CI against all Go versions newer than the minimal one set … 

    …in go.mod

Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    e8c8cf9 View commit details
    Browse the repository at this point in the history

  8. chore: download python dependencies from requirements-test.txt 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    25e6ace View commit details
    Browse the repository at this point in the history

  9. chore: use the minimal Go version set in go.mod for releases 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    d9d42f1 View commit details
    Browse the repository at this point in the history

  10. chore: pin the go-version-action using a digest 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    89e45e9 View commit details
    Browse the repository at this point in the history

  11. chore: configure dependabot to use chore commit prefix for gomod updates 

    Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    2b9b0c9 View commit details
    Browse the repository at this point in the history

  12. chore: revert the use of dedicated requirements.txt file path for git… 

    …hub actions

Signed-off-by: Radoslav Dimitrov <[email protected]>
    @rdimitrov
    rdimitrov committed Mar 24, 2022
    Configuration menu
    Copy the full SHA
    f8d33dc View commit details
    Browse the repository at this point in the history